Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: Q27KxE4IGaGnc+8GUynX6bkbAYrzxSkhvKuuKrSAKFo=
Subject key identifier: 2F:98:23:B9:E9:2A:82:35:B7:80:AE:68:1D:1F:47:49:D0:61:67:B1
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019F194427C4AD0BE0640AAE8C7B001A9EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0C29
Signing time: Tue 30 Jun 2026 16:02:04 +0000
Manifest this update: Tue 30 Jun 2026 16:02:04 +0000
Manifest next update: Wed 01 Jul 2026 16:02:04 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: mdSCTOBj+GvVlhAOIpyvfavXw4/5CnHIXqVxhSKhry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:27:c4:ad:0b:e0:64:0a:ae:8c:7b:00:1a:9e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Jun 30 16:02:04 2026 GMT
Not After : Jul 1 16:02:04 2026 GMT
Subject: CN=2f9823b9e92a8235b780ae681d1f4749d06167b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:a3:6b:8e:6d:e6:e7:4b:7e:32:27:8e:70:
b0:71:ca:56:ec:fe:32:1a:d0:ca:68:bb:0d:f2:c2:
6a:f1:9c:12:3f:c7:d4:c0:66:19:3b:49:cd:73:55:
52:5d:c4:e4:b9:ca:ce:11:e3:09:80:af:4c:a5:2d:
61:44:b3:23:79:bc:47:6e:7c:22:03:3b:a3:96:91:
31:40:5c:36:75:a8:ca:5d:1b:53:4f:6f:e2:bc:45:
8d:d6:07:9f:c5:00:21:bb:ef:5c:de:c7:11:f6:19:
e8:ed:2b:4c:75:ac:0c:01:37:00:b0:a9:dd:e1:d9:
c9:ab:87:0b:fb:68:b1:93:60:6c:39:c4:20:04:0a:
f9:b4:eb:4c:d7:81:ea:64:b4:20:89:9f:ab:19:6a:
fb:09:70:79:5e:2a:68:04:26:fc:9d:63:8b:04:c1:
9a:b2:02:35:cb:94:a8:7e:d3:09:13:74:11:c8:db:
5e:bd:53:3f:ae:e9:07:d4:8a:08:c1:00:de:98:d1:
02:27:b9:e9:01:f6:84:c3:57:94:d1:65:5d:11:05:
d6:e2:b0:df:92:86:9a:ee:e9:42:01:5c:51:b9:47:
72:d5:f4:07:44:f6:cd:58:8c:73:4a:6e:62:b0:5c:
b6:f3:b6:20:10:00:81:0a:a0:03:6d:27:75:f4:36:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:98:23:B9:E9:2A:82:35:B7:80:AE:68:1D:1F:47:49:D0:61:67:B1
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:53:3b:37:e8:3f:14:25:5f:f0:b2:62:80:15:da:2f:90:cd:
05:a1:46:b7:72:83:a7:98:2d:14:5a:ec:11:bd:fb:c0:62:a6:
1d:a2:d1:3d:dd:ba:0f:17:7e:a4:29:d6:c1:4e:f5:1f:6e:d4:
c4:83:0c:a6:28:e8:2a:fb:c7:e9:b8:53:22:cb:9a:e6:ce:f4:
35:80:b8:78:06:b8:22:18:5d:11:5b:66:f6:76:09:22:4c:8a:
58:af:4e:d7:35:dc:b9:db:a4:ef:a8:70:4f:c4:0b:f1:17:fa:
4c:62:8c:2f:4d:73:49:e3:56:42:89:9b:16:e0:ef:fc:77:af:
32:14:57:77:fd:c2:14:90:30:c0:95:43:d6:19:23:85:41:05:
3f:f4:af:8a:28:98:ae:b8:7c:d0:9c:b9:91:a3:6f:7b:a1:36:
d4:8b:d1:2d:17:cf:83:b2:ce:b1:7e:db:6a:a2:7c:54:82:9a:
cb:ce:0b:a5:20:9a:a2:8a:11:ff:6f:38:c8:bd:ed:ef:72:16:
58:89:c5:fa:15:1a:4b:77:c7:09:bd:91:53:e7:77:f5:aa:ed:
9b:0e:8f:78:0d:7d:cf:08:6e:37:9e:28:82:b0:ad:bd:ab:c6:
51:7e:9d:57:e4:c4:7d:03:4e:aa:58:37:2c:5b:8c:42:83:db:
fa:3a:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:45 2026 by rpki-client